$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft File: 156odshIAT1wTjIDr31ghtsCx50.mft (raw, json) Hash identifier: Q/cFD4Iezu7HcbhEzl0u8LEgIY2YBGZ87O2e9/zo3Gs= Subject key identifier: C6:C8:3F:13:5F:A9:C9:AE:65:CB:72:B2:F3:CE:A3:01:30:92:BE:7E Authority key identifier: D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D Certificate issuer: /CN=A91EB7B8/serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft Manifest number: 02F3 Signing time: Fri 25 Apr 2025 01:04:09 +0000 Manifest this update: Fri 25 Apr 2025 01:04:09 +0000 Manifest next update: Fri 02 May 2025 01:04:09 +0000 Files and hashes: 1: 156odshIAT1wTjIDr31ghtsCx50.crl (hash: N1AqApBj/DWjEan/WCQ9ws5G4QegxH2qoUamwrGXRao=) 2: BD8AAEBAD6BE11EEAAFF5049C4F9AE02.roa (hash: YRBBvYzXkWRWLkE236Di+i1iGk4csDhuPaUKd1DrSGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:04:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7B8, serialNumber=D79EA876C848013D704E3203AF7D6086DB02C79D Validity Not Before: Apr 25 01:04:09 2025 GMT Not After : May 2 01:04:09 2025 GMT Subject: CN=680adf89-08dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:64:69:a2:00:32:61:2f:3b:19:92:c2:58: 96:6d:4c:ba:82:99:2c:48:49:a6:a0:a5:80:82:7a: a9:c4:fb:5e:a2:85:16:76:86:ec:71:53:7e:9f:90: cb:18:8b:43:50:cd:4b:c7:96:69:5b:d8:57:c8:3a: 35:56:cb:82:e5:5b:55:f7:0e:2c:4f:38:3b:93:5c: e7:24:0d:2b:95:4a:a6:9a:24:97:e6:20:0b:6f:d2: 37:11:99:17:3e:1f:93:70:94:e7:77:41:e5:f1:52: ca:dc:9b:ea:5f:1d:e2:6c:1b:94:d2:6d:c3:18:c1: a4:b6:51:ce:01:5d:0b:7a:bf:dc:82:18:fc:3d:e9: 50:75:9d:c8:99:32:08:ab:f0:8e:de:d0:d2:77:0c: b4:58:8b:5f:ab:6d:58:3e:69:d3:d6:30:d5:b2:0b: 52:e1:6e:5e:cc:90:d3:96:2c:32:e0:27:4c:b4:04: 3b:b1:77:72:1d:79:61:eb:5d:1b:c5:33:44:32:33: b9:6f:8b:f2:0f:c5:30:a3:ca:a6:41:6d:fb:12:ee: f1:a6:1b:9e:24:6b:07:21:82:a0:05:ac:9e:02:d4: d9:b6:ef:21:37:cc:15:a9:40:fb:b1:c5:8e:a8:1f: 30:e9:e9:6d:a8:a5:fd:cc:7e:b4:d0:2f:c4:20:ae: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C8:3F:13:5F:A9:C9:AE:65:CB:72:B2:F3:CE:A3:01:30:92:BE:7E X509v3 Authority Key Identifier: keyid:D7:9E:A8:76:C8:48:01:3D:70:4E:32:03:AF:7D:60:86:DB:02:C7:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/156odshIAT1wTjIDr31ghtsCx50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7B8/4DE16CE4D81811ECB6493D5AC4F9AE02/156odshIAT1wTjIDr31ghtsCx50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:65:2e:32:99:ff:f0:f7:02:82:7a:88:7f:78:57:b7:3d:8c: 4c:cb:91:20:55:44:b1:ef:70:e4:a8:79:be:37:8e:45:84:14: 12:92:78:14:7a:bd:dd:18:20:b2:82:f9:3a:3b:23:a8:c9:1d: 7c:30:19:c1:49:f8:c6:18:0c:64:7a:34:59:84:04:86:d8:b2: eb:d0:44:c1:7f:54:0c:a7:23:f8:34:f6:26:4f:16:6d:ff:1d: 77:81:1c:eb:87:bb:b7:79:d4:88:94:5d:1c:90:06:2b:fe:9b: 7f:17:2c:3d:71:cb:8a:1c:7e:62:97:6d:7b:5c:7f:0b:6b:c3: 0c:f9:17:51:92:80:d8:33:a4:ee:64:cc:e6:d6:c5:6b:b0:25: 2b:43:4b:98:bc:63:b8:0e:ac:36:b6:2f:ce:76:26:d6:03:f5: fb:2b:70:17:e1:e7:2c:68:e7:35:ec:fe:5e:2e:80:a5:60:b9: 6a:6f:66:67:27:1a:7a:e0:89:5c:37:02:5f:e8:b1:31:d4:bc: aa:27:ae:d1:83:7e:57:7e:d1:76:41:ca:87:a7:51:1f:61:77: b3:c2:aa:30:06:b2:99:51:ad:17:e0:0d:fe:e9:c0:ba:35:fe: 9a:ab:51:58:2d:dd:df:0d:5e:a8:99:fd:ff:6a:8a:78:e3:a4: 98:a2:ec:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QjgxMTAvBgNVBAUTKEQ3OUVBODc2Qzg0ODAxM0Q3MDRFMzIwM0FGN0Q2MDg2 REIwMkM3OUQwHhcNMjUwNDI1MDEwNDA5WhcNMjUwNTAyMDEwNDA5WjAYMRYwFAYD VQQDEw02ODBhZGY4OS0wOGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8VkaaIAMmEvOxmSwliWbUy6gpksSEmmoKWAgnqpxPteooUWdobscVN+n5DL GItDUM1Lx5ZpW9hXyDo1VsuC5VtV9w4sTzg7k1znJA0rlUqmmiSX5iALb9I3EZkX Ph+TcJTnd0Hl8VLK3JvqXx3ibBuU0m3DGMGktlHOAV0Ler/cghj8PelQdZ3ImTII q/CO3tDSdwy0WItfq21YPmnT1jDVsgtS4W5ezJDTliwy4CdMtAQ7sXdyHXlh610b xTNEMjO5b4vyD8Uwo8qmQW37Eu7xphueJGsHIYKgBayeAtTZtu8hN8wVqUD7scWO qB8w6eltqKX9zH600C/EIK7akQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbIPxNf qcmuZctysvPOowEwkr5+MB8GA1UdIwQYMBaAFNeeqHbISAE9cE4yA699YIbbAsed MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCOC80REUxNkNFNEQ4 MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFUMXdUaklEcjMxZ2h0c0N4 NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE1Nm9kc2hJQVQxd1RqSURyMzFnaHRzQ3g1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCOC80REUxNkNFNEQ4MTgxMUVDQjY0OTNENUFDNEY5QUUwMi8xNTZvZHNoSUFU MXdUaklEcjMxZ2h0c0N4NTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwZS4ymf/w9wKCeoh/eFe3PYxMy5EgVUSx73DkqHm+N45FhBQSkngU er3dGCCygvk6OyOoyR18MBnBSfjGGAxkejRZhASG2LLr0ETBf1QMpyP4NPYmTxZt /x13gRzrh7u3edSIlF0ckAYr/pt/Fyw9ccuKHH5il217XH8La8MM+RdRkoDYM6Tu ZMzm1sVrsCUrQ0uYvGO4Dqw2ti/OdibWA/X7K3AX4ecsaOc17P5eLoClYLlqb2Zn Jxp64IlcNwJf6LEx1LyqJ67Rg35XftF2QcqHp1EfYXezwqowBrKZUa0X4A3+6cC6 Nf6aq1FYLd3fDV6omf3/aop446SYouwI -----END CERTIFICATE-----Generated at Sat Apr 26 13:02:37 2025 by rpki-client